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14. A methofcl for personalizing GSM chips having a memory range in which at 
fication number IMSI and a card number ICCID are stored, and 


least one subscriber ident 


wherein for personalizing tie chip an additional secret key Ki and, optionally, additional data 


are stored, wherein at the 


specific data, namely a firs 


manufacturer for pre-personalizing the chip, at least initial card- 
t secret key KM and, optionally, additional data, such as PIN and 


PUK are stored, comprising the steps of 

a) performing the personalization of the chip when the subscriber logs on to the 
subscriber network for the first time; 

b) obtaining the ICCDD and the IMSI from a number pool, the chip itself derives an 
initial key KM from a key K|1 which is known and entered into the chip, while PIN and PUK 
are set to a default value; 

c) making an entry \A the authentication center (AC) and the home location register 
(HLR) as soon as a subscriber has entered into a contract with the network operator; 

d) deriving the authentication center (AC) the initial first key KM ; 

e) setting the conditions of the network so that during logon to the network, a 
connection is established frdm the chip to the security center of the network operator (SC); 

f) routing the connection from the chip to the SC during the first logon; 

g) negotiating a new second secret key Ki_2 and, optionally, a PUK with the chip or 
generated in the security certter (SC) and transmitted to the chip; 

h) disabling the conditions of step e). 



' "f # 

1 15. The method according to claim l^wherein the initial secret key KM which is first 

2 stored in the chip, is not transmitted to and stored in the AC before the contract is 

3 established. I 

1 16. The method according to claim 14, further comprising the step of employing a Diffie- 

2 Hellman method to negotiate the second secret key Ki_2. 

1 1 7. The method according to claim 1 6, wherein the home location register (HLR) is capable 

2 of setting and deleting a rerouting command (hotlining flag). 

H I 

lli 18. The method according to claim 1 7, wherein , when the initial key KM is entered into the 

i|| authentication center (/MC) for the first time, the hotlining flag is also set in the home location 

:L3 register (HLR). 1 

'3 1 9. A chip having stored in the memory range at least one subscriber identification number 

2 IMSI and a card number 1ICCID as well as for the purpose of personalization an additional 

3 secret key Ki and, optionally, additional data, wherein for pre-personalizing the chip there are 

4 further stored initial carcA-related data, namely a first secret key KM and, optionally, 

5 additional data, such as PIN and PUK, wherein the chip in the terminal equipment is Toolkit- 

6 enabled and includes means for communicating with a security center (SC) and negotiating 

7 a key. I 
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20. The chip according to claim 1 9, wherein the chip includes means for receiving data from 


the security center 


(SC) and means for writing these data to a memory and, optionally, 


reading these data worn the memory, changing these data and/or transmitting these data to 
the security center (EC). 


1 21. The chip according to claim 20, wherein the chip comprises a microprocessor for 

2 negotiating a secret keW with the security center (SC). 


1 22. The chip according\to claim 21, wherein the chip includes a dialing number which is 
'% fixedly programmed by thfe manufacturer (fixed dialing). 
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